Collaborate Disseminate
Yesterday’s Patch Tuesday release also included an update to Microsoft’s Internet Explorer and Edge browsers officially ending support for the SHA-1 hash function. Continue reading Microsoft Makes it Official, Cuts off SHA-1 Support in IE, Edge
Researchers unveiled the first-ever practical collision attack the cryptographic hash function SHA-1.
Continue reading First Practical SHA-1 Collision Attack Arrives
Researcher Mariusz Mlynski found and disclosed four high-severity vulnerabilities in Chrome’s Blink rendering engine, earning himself $32,000 through the Chrome Rewards program. Continue reading High-Severity Chrome Vulnerabilities Earn Researcher $32K in Rewards
Mike Mimoso, Tom Spring, and Chris Brook discuss security-wise what they hope will and won’t change under a Trump presidency, then discuss the news of the week, including SHA-1 deprecation, Carbanak’s return, and the WhatsApp “backdoor” debacle. Continue reading Threatpost News Wrap, January 20, 2017
Things are about to get a lot safer on the internet with SHA-2, but there is plenty of work still to be done when it comes to SHA-1 deprecation. Continue reading SHA-1 End Times Have Arrived
Google released its final SHA-1 deprecation deadlines, and crypto services provider Venafi said that 35 percent of the web is still running weak SHA-1 certificates. Continue reading Google Removing SHA-1 Support in Chrome 56